Re: [Sip] Re: RLS and identity

Adam Roach wrote:

> Based on Rohan's suggestion, the text will effectively say:
>
> - Jon's Identity draft will be mandatory to implement, optional to use.
>
> - Other mechanisms that have properties such that they can adequately
>   convey the identity of the subscriber and the permission of the RLS
>   to subscribe on the user's behalf can also be used.

As a clarification, I have received specific guidance from the area 
directors that the draft cannot contain anything about such alternate 
mechanisms, even if they are not specifically mentioned by name. The use 
of e.g. P-Asserted-Identity will need to be a modification that 3GPP 
specifically calls out relative to the draft.

Of course, since the identity work is basically done and works so much 
better than P-Asserted-Identity, there could be a very valid argument 
made that 3GPP R6 should abandon the inherently insecure 
P-Asserted-Identity mechanism in favor of the cryptographically secure 
SIP Identity mechanism.

/a

_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors@cs.columbia.edu for questions on current sip
Use sipping@ietf.org for new developments on the application of sip